registry / @echomem/mcp / 1.4.61
@echomem/mcp@1.4.61
EchoMem MCP bridge for cross-agent memory, local history import, and recall
AI Security Review
scanned 19d ago · by lpm-firewall-aiSource inspection found no package install hook and no confirmed attack behavior. Agent hook configuration is written through the setup flow for detected clients, while the inspected network and local process behavior is consistent with the package’s memory bridge functions.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the setup command or starts the MCP server; runtime staging occurs through an EchoMem runtime update flow.
Impact
No confirmed credential theft, unrelated data transfer, or unconsented install-time agent configuration change was established.
Mechanism
Setup adds EchoMem hooks for detected Codex or Claude Code clients, and the package uses the EchoMem API endpoint by default. The inspected local process calls query local session data or open a link.
AI rationale
Source inspection found no package install hook and no confirmed attack behavior. Agent hook configuration is written through the setup flow for detected clients, while the inspected network and local process behavior is consistent with the package’s memory bridge functions.
Evidence
package.jsondist/setup.jsdist/hud/hooks.jsdist/headless-runtime.js
Network endpoints1
echo-mem-chrome.vercel.app
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines no install lifecycle hook; the prepack script only builds the package.
- The setup CLI installs EchoMem hooks for detected Codex or Claude Code clients when setup runs; the hook module exposes these as explicit functions.
- The hooks target configured Codex and Claude settings locations and add EchoMem checkpoint behavior.
- Setup uses the EchoMem API endpoint by default, and the HUD child processes shown query local SQLite data or open a link.
- The remaining cited files inspect local session paths, configured profile directories, and EchoMem runtime setup.
Evidence against
- Setup can write EchoMem hooks into agent configuration, and the runtime can stage an EchoMem package release; these actions are tied to setup or runtime update flows.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
8 flaggeddist/durable-entry.jsView file
1import { spawnSync } from "node:child_process";
L2: import fs from "node:fs";
High
Child Process
Package source references child process execution.
dist/durable-entry.jsView on unpkg · L1dist/setup.jsView file
701};
L702: const result = spawnSync(process.env.ComSpec || "cmd.exe", ["/d", "/s", "/c", `"${shellCommand}"`], spawnOptions);
L703: if (result.error)
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/setup.js:
import readline from "node:readline";
return configuredProfileDirectory("CODEX_HOME", ".codex");
return configuredProfileDirectory("CLAUDE_CONFIG_DIR", ".claude");
if (env.CLAUDE_DESKTOP_SUPPORT_DIR?.trim())
...claudeDesktopClients,
{ id: "codex", label: "Codex", kind: "command", detectDir: codexHome(), configPath: path.join(codexHome(), "config.toml"), note: "add to ~/.codex/config.toml under [mcp_servers.ech...
* can merge the user entry into ~/.claude.json without a CLI, a profile is enough to act on.
return fs.existsSync(home(".claude")) || fs.existsSync(home(".claude.json")) || claudeCodeCliAvailable();
Findings
7 High3 Medium5 Low
HighChild Processdist/durable-entry.js
HighShelldist/setup.js
HighSame File Env Network Executiondist/hud/server.js
HighCredential Redirect Persistencedist/setup.js
HighTrigger Reachable External Ai Agent Control Surface Mutationdist/hud/hooks.js
HighSemantic Analysis Limiteddist/headless-runtime.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/setup.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/hud/autostart.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @echomem/mcp@1.4.61.
See all versions of @echomem/mcp for other recorded verdicts.
- Review the evidence and your use of @echomem/mcp@1.4.61 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.